Slash Commands

Stale

xt0rted/slash-command-action · MIT

A GitHub Action to check comments for slash commands

★ 69 starsLast commit 7 months agoLatest v2.0.0

/ 100

Security signals

OpenSSF Scorecard4.5 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: xt0rted/slash-command-action@bf51f8f5f4ea3d58abc7eca58f77104182b23e88 # v2.0.0

Mutable tags like v2.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: xt0rted/slash-command-action@bf51f8f5f4ea3d58abc7eca58f77104182b23e88 # v2.0.0

Score breakdown

Security (35%)47

Popularity (20%)34

Maintenance (30%)23

Reliability (15%)70